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(57) Abstract 

An integrated series of security protocols is disclosed that protect remote user communications (22) with remote enterprise services, 
and simultaneously protect the enterprises services from third parties. In the first layer, an implementation of the Secure Sockets Layer (SSL) 
version of a HTTPS provides communications security, including authentication of the enterprise web server and the security of the 
transmitted data. The protocols provide for an identification of the user, and an authentication of the user to ensure the user is who he/she 
claims to be and a detennination of entitlements that the user may avail themselves of within the enterprise system. Session security is 
described, particularly as to the differences between a remote user's copper wire connection to a legacy system and a user's remote 
connection to the enterprise system over a "stateless" public Internet (15), where each session is a single transmission, rather than an interval 
of time between logon and logoff; as is customary in legacy systems. Security for the enterprise network and security for the data maintained 
by the various enterprise applications is also described. 



FOR THE PURPOSES OF INFORMATION ONLY 



Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT. 



AL 


Albania 


ES 


Spain 


LS 


Lesotho 


SI 


Slovenia 


AM 


Armenia 


FI 


Finland 


LT 


Lithuania 


SK 


Slovakia 


AT 


Austria 


FR 


France 


LU 


Luxembourg 


SN 


Senegal 


AU 


Australia 


GA 


Gabon 


LV 


Latvia 


sz 


Swaziland 


AZ 


Azerbaijan 


GB 


United Kingdom 


MC 


Monaco 


TD 


Chad 


OA 


Bosnia and Herzegovina 


GE 


Georgia 


MD 


Republic of Moldova 


TG 


Togo 


BB 


Barbados 


GH 


Ghana 


MG 


Madagascar 


TJ 


Tajikistan 


BE 


Belgium 


GN 


Guinea 


MK 


The former Yugoslav 


TM 


Turkmenistan 


BF 


Buricini Faso 


GR 


Greece 




Republic of Macedonia 


TR 


Turkey 


BG 


Bulgaria 


HU 


Hungary 


ML 


Mali 


TT 


Trinidad and Tobago 


BJ 


Benin 


IE 


Ireland 


MN 


Mongolia 


UA 


Ukraine 


BR 


Brail 


IL 


Israel 


MR 


Mauritania 


uc 


Uganda 


BY 


Belarus 


IS 


Iceland 


MW 


Malawi 


us 


United States of America 


CA 


Canada 


IT 


Italy 


MX 


Mexico 


uz 


Uzbekistan 


CF 


Central African Republic 


JP 


Japan 


NE 


Niger 


VN 


Viet Nam 


CO 


Congo 


KE 


Kenya 


NL 


Netherlands 


YU 


Yugoslavia 


CI1 


Switzerland 


KG 


Kyrgyzstan 


NO 


Norway 


ZW 


Zimbabwe 


CI 


COte d'lvoire 


KP 


Democratic People's 


NZ 


New Zealand 






CM 


Cameroon 




Republic of Korea 


PL 


Poland 






CN 


China 


KR 


Republic of Korea 


FT 


Portugal 






CI) 


Cuba 


KZ 


Kazakstan 


RO 


Romania 






cz 


Czech Republic 


LC 


Saint Lucia 


RU 


Russian Federation 






DE 


Gam any 


Li 


Liechtenstein 


SD 


Sudan 






UK 


Denmark 


LK 


Sri Lanka 


SE 


Sweden 






EE 


Estonia 


LR 


Liberia 


SG 


Singapore 







INTERNATIONAL SEARCH REPORT 



International application No. 
PCT/US98/20158 



CLASSIFICATION OF SUBJECT MATTER 
1PC(6) : H01J 13/00 
US CL :395/200.59 

According to International Patent Classification (IPC) or to both national classification and IPC 



FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 
U.S. : 395/200.59; 395/187.01; 395/609; 395/200.79; 395/200.32; 395/200.12 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 
INTERNET, APS 



C DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



Y 

Y,P 
Y,P 
Y,P 
Y,P 



TAMEMBAI,, ANDREW S M Computer Networks, Prentice Hall, 
1996, p. 4KM12. 

WO 97/16911, A (GORE), 09 May 1997 (09.05.97) p. 2 11. 4-40. 

US 5,802,320 A (BAEHR et al) 01 SEPTEMBER 1998 (01.09.98) 
fig 6, fig 9. 

US 5,805,803, A (BIRRELL et al) 08 SEPTEMBER 1998 
(08.09.98), fig. 1. 

US 5,826,029, A (GOREet al), 20 OCTOBER 1998 (20.10.98) fig. 
4A. 

US 5,793,964 A (ROGERS et al.) 11 AUGUST 1998 (11.08.98) fig. 
11. 



1-36 

1-36 
1-36 

1-36 

1-36 

1-36 



fx] Further documents are listed in the continuation of Box C. Q See patent family annex. 



Special eatesoriea of cited documeati: 

document defining the general etate of the art which ia oc4 ccotidered 
to be of particular relevance 

earlier document pubfrbed oo or after tba iotaraatMoal films data 

document vhtafc nay throw doubti on priority claim(t) or which u 
cited to ttuHMt tba pubbceboo data of toolbar citation or othar 
■oo (aa eoecifiad) 



•X* 



•Y* 



document referring to as oral diacloeur*. uaa. exhibition or othar 



document pitbfrh—* prior to tha bternational ftlisg data but later thaa 
tha priority date claimed 



tateT d fn mT* piiblirh*'* after tha bdanutiooal filing data or priority 
date and not in ooofliet with tba application but cited to undentmd 
tha principle or steory underr/bag tha invention 

L of particular rahwasoa; lha claim ad invention cannot be 
eel or cannot ba occeridared to in voir* an inventive step 
whan fee document it takes alona 

document of particular relevance; the claimed invention cannot ba 
ooasidered to invorve an inventive step when (ha document b 
eoaabinad with ooa or mora othar euefa docunienta, web eoabinatioo 
being obviou* to a paraoo akillad in tha art 

document vembar of lha aama patent family 



Date of the actual completion of the inter n a t i on al search 
02 DECEMBER 1998 



Date of mailing of the international search report 

12 MAR 1999 



Name and mailing address of the ISA/US 
r^mmr* 1 "^ ftf ^etotite and Trademark* 
Box PCX 

Washington, D.C 20231 
Facsimile No. (703) 305-3230 



Authorized officer 

GLENTON BURGESS^/ZW^e 
Telephone No. (703) $05-4792 



Form PCTASA/210 (second sheet)(July 1992)* 



INTERNATIONAL SEARCH REPORT 


International application No. 
PCT/US98tt0i58 


C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 


Category* 


Citation of document, with indication, where appropriate, of the relevant paaiagc* 


Relevant to claim No. 


Y.P 
YJ» 


US 5,708,780 A (LEVERGOOD et al.) 13 JANUARY 1998 
(13.01.98), fig. 3. 

US 5,815,665 A (TEPER et al.) 29 SEPTEMBER 1998 (29.09.98) 
fig. 1. 


1-36 
1-36 



Form PCT/ISA/210 (continuation of second ahect)(July 1992)* 



